Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File:                     R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier:          n8iTlrQ9/ozHHBFfudRlyIL9vAUzcpmmnknjhtesSws=
Subject key identifier:   2C:06:F4:BB:55:38:68:FA:22:1F:49:7C:AB:C6:3B:48:19:BC:D0:EE
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer:       /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial:       0197722CC4135F122D9E99AF8000790E9089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number:          052E
Signing time:             Sun 15 Jun 2025 06:00:25 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:25 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:25 +0000
Files and hashes:         1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: +1vNqxFvhhIpZ4lwNUE3jj88RD2QXs7zK/s9bsBY1xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:c4:13:5f:12:2d:9e:99:af:80:00:79:0e:90:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
        Validity
            Not Before: Jun 15 06:00:25 2025 GMT
            Not After : Jun 16 06:00:25 2025 GMT
        Subject: CN=2c06f4bb553868fa221f497cabc63b4819bcd0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:25:42:86:15:ec:8f:00:f5:fb:75:43:92:
                    06:d9:14:34:fc:46:f3:e9:ce:11:93:ca:a9:0d:4f:
                    39:71:4f:59:7a:08:2c:5b:8b:83:b3:81:35:c3:21:
                    c5:3e:3d:f1:3d:f6:9a:0c:92:2e:e2:1b:9f:ab:74:
                    17:65:f5:1f:97:92:2c:a4:bb:fb:37:c4:94:d0:c2:
                    8c:73:ef:13:d9:a1:1e:52:97:14:3f:81:f1:af:a1:
                    c2:10:e2:0d:29:49:42:7c:37:15:96:5b:cc:95:7b:
                    6b:6b:35:75:41:82:56:bd:d9:ca:67:28:ef:c6:e7:
                    ae:30:2e:09:49:dd:84:c0:2b:00:17:4d:e2:9c:cf:
                    0f:42:2f:14:b0:1d:25:be:68:19:02:a7:ae:a3:f7:
                    75:2e:5b:b8:f1:01:6d:8c:77:e5:95:57:93:a4:b0:
                    41:fb:bf:bf:dd:53:e0:0c:e9:74:e6:d2:5b:c4:76:
                    10:ab:d8:54:45:16:9a:62:bb:87:9c:0e:6b:27:c5:
                    e8:76:1d:8e:7b:85:87:68:7a:8e:69:56:27:f8:60:
                    e9:5c:96:d4:75:d1:13:a1:16:e5:e7:7c:86:42:f7:
                    3b:9d:53:01:02:be:08:3c:d7:2e:ed:0a:48:c2:fd:
                    31:57:71:2f:60:35:3b:19:d5:43:b8:41:7c:0e:08:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:06:F4:BB:55:38:68:FA:22:1F:49:7C:AB:C6:3B:48:19:BC:D0:EE
            X509v3 Authority Key Identifier:
                keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d9:88:db:07:ad:32:3b:4a:63:6c:d7:74:75:38:ff:30:4b:
         a6:d0:aa:2f:2a:f5:12:7a:b0:91:48:36:5e:53:e4:ee:b6:b2:
         3d:7c:a4:4b:ea:b9:f6:4e:73:64:b1:27:05:73:0a:7d:97:25:
         ff:1e:aa:84:b9:ff:70:c7:47:c6:54:21:23:4f:d9:9f:de:64:
         7b:05:2e:d9:8f:ac:c9:a6:20:8b:67:7e:8a:5f:57:ff:2c:d9:
         1b:8f:7e:47:4d:d8:00:74:f2:0a:7b:fc:b6:84:a3:d9:d3:a0:
         0b:32:f6:e5:b4:64:09:40:1a:9a:9a:dd:a2:40:2b:34:6a:9d:
         66:99:58:ed:34:c8:00:52:1b:22:44:7b:71:d0:9c:fd:9f:b5:
         34:e1:06:9e:72:b8:49:1c:ec:fa:4c:4d:fb:c1:19:e7:81:80:
         6c:94:64:b5:c9:cb:4b:9b:ea:76:93:54:b4:26:d6:0e:30:d0:
         c1:ee:9d:a5:01:73:38:f8:eb:40:50:9c:ca:91:3a:87:35:1d:
         ea:9b:f3:cb:8f:7a:1e:05:35:44:db:65:9c:1e:13:59:0e:7a:
         e9:bb:f3:b2:99:6b:a5:57:0e:c1:cf:10:e3:9f:7f:16:18:ba:
         74:85:4a:7b:4b:d6:6c:03:60:a5:cf:55:dc:15:b5:6b:51:9b:
         61:dc:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:16:47 2025 by rpki-client